VERIS Mappings to ATT&CK - Bridging Risk-based and Ops-focused Incident Classification
summary
VERIS now maps its incident actions and attributes to MITRE ATT&CK techniques and tactics, created jointly with MITRE CTID and industry partners and published on GitHub as STIX and Excel artifacts plus ATT&CK Navigator layers. The mapping is bidirectional, supports rollups from technique-tagged detections to VERIS risk categories, and is already used on a DBIR dataset spanning ~16 years and ~5,000–6,000 breaches and contributions from 100+ organizations. Scripts accompany the repo to translate event tags and consolidate technical telemetry into higher-level risk and impact counts.
AI-written summary · about
chapters (5)
- 0:00Introduction to incident data
- 1:45Overview of the Veris framework
- 7:34Deep dive into Veris components
- 17:05Bridging Veris and MITRE ATT&CK
- 23:05Closing remarks
related talks
44mImprove Likelihood Calculation by Mapping MITRE ATT&CK to Existing Controls
01h 47mMITRE ATT&CK Fundamentals
48mMITRE ATT&CK: The Play at Home Edition
58mMITRE ATT&CK for Developers
26mImproving Cybersecurity Posture with an AI Security Assistant
13mQuick Look: Operationalised Risk Modeling Using the Data Breach Repository
30mThe SOC Counter ATT&CK
40mMITRE ATT&CK® as a Framework for Cloud Threat Investigation